Privacy Policy

This Privacy Policy explains what CareRelay, LLC (“CareRelay,” “we,” “us”) collects, how we use it, and the choices you have. It applies to our website (carerelay.health), our platform, and our notifications (SMS and email). It covers facility users (administrators and schedulers) and care professionals (“workers”) who use the platform.

From workers.

• Account and contact details: name, phone number, email, and role (e.g., RN, LPN, CNA).
• Notification preferences: whether you've chosen SMS alerts, email alerts, or neither. Both are optional — you can always view and claim open shifts in your CareRelay account. See SMS Shift Alerts — How Opt-In Works for the full opt-in flow.
• Credential information: license or registry type, number, state, and verification status. We verify credentials against official state sources.
• Screening and clearance status: eligibility results from required background screening and state workforce background-check programs (such as Michigan's fingerprint-based check). We store the eligibility result and related identifiers — not the underlying criminal-history records. We never collect or store Social Security numbers; those are provided by you directly to our payment processor (Stripe, for tax forms and identity verification), the screening provider, or the state background-check system.
• Shift activity: shifts offered, accepted, confirmed, worked, and related timestamps.
• Shift verification data: when you clock in and clock out, we capture a self-photo, a timestamp, and your device's location at those two moments only. We do not track your location between clock-in and clock-out or at any other time, and we do not use facial recognition.
• Payment details: handled by Stripe, our payment processor. Your tax form (W-9) and payout account are collected and stored by Stripe; we receive confirmation and transaction records, not your full banking details.
• Consent records: when you enable SMS or email alerts, we log the date, time, and version of the disclosure you saw, and we keep a log of messages sent and received so we can honor your choices and resolve disputes.

From facility users.

• Account and contact details: name, work email, phone, role, and your facility's information.
• Shift and operational data your facility posts: roles, times, rates, and confirmations.
• Internal staff license information (optional add-on): if your facility elects our Internal Staff License Monitoring service, the facility provides the names and license/registry numbers of enrolled internal staff. We check that information against public state licensing sources and report status results to the facility. We do not conduct background checks on internal staff and store only license/registry status information for this service.

From website visitors.

• Usage analytics: pages visited, time on page, scroll depth, device type, and similar analytics (including on personalized prospect pages we may create for facilities we're speaking with), collected via cookies or similar technologies through our analytics provider.

No resident or patient information. The platform is for shift logistics only. Facility users and workers are prohibited from entering resident names, health conditions, or any resident-identifiable information into the platform or sending it by SMS or email. Care details are exchanged directly between the facility and the worker, off-platform. Calls between facility supervisors and workers happen directly between them — we do not route or record them.

• To operate the platform: broadcasting shifts, matching acceptances, facility approvals, and notifications by the channels you've chosen.
• To verify eligibility: credential checks and background/state clearance status, so facilities can rely on placements.
• To provide elected services, such as Internal Staff License Monitoring for facilities that opt in.
• To verify service delivery and pay accurately: clock-in/out records determine verified hours and payouts.
• To send transactional alerts you've opted into: shift offers, confirmations, and logistics, by SMS and/or email. We do not send marketing texts.
• To keep records the law or our compliance obligations require: consent logs, verification records, and audit trails.
• To improve the product and understand interest in our service (analytics).

We do not sell personal information. We share it only as follows:

With facilities. When you accept a shift, the facility sees your name, role, credential status, and shift records (hours, confirmations, late-arrival flags). Clock-in photos and location data are visible only to CareRelay; the facility sees the resulting verified hours, and a facility administrator may confirm hours manually if GPS fails. Facilities that elect License Monitoring receive status results for their own enrolled internal staff.

With service providers who process data for us. Twilio (SMS delivery), Resend (email delivery), Stripe (payments and tax forms), our cloud hosting provider, our analytics provider, and background-screening providers or state background-check systems. They may use the data only to provide their services to us.

For legal reasons. To comply with law, respond to lawful requests, enforce our agreements, or protect the rights and safety of workers, facilities, residents, or the public.

In a business transfer. If CareRelay is involved in a merger, acquisition, or sale of assets, information may transfer as part of that transaction, subject to this Policy.

SMS consent data. Text messaging originator opt-in data and consent are not shared with or sold to any third parties or affiliates for marketing or promotional purposes.

• Clock-in photos and location captures: retained for 60 days after the shift (long enough to resolve any pay dispute), then deleted.
• Consent logs and compliance records: retained for as long as needed to demonstrate consent and meet legal obligations.
• Account, credential-status, and shift records: retained while your account is active and as required for legal, tax, and audit purposes, then deleted or de-identified.

We use reasonable administrative, technical, and physical safeguards appropriate to the data we hold, including encryption in transit, access controls, and audit logging. No system is perfectly secure; if a breach affecting Michigan residents' covered data occurs, we will notify affected people as required by the Michigan Identity Theft Protection Act and other applicable law.

Notifications. SMS and email alerts are both optional. Reply STOP to any text, use the unsubscribe link in any alert email, or change your preferences in your profile at any time — your account and your ability to view and claim shifts in the platform are unaffected; you'll just stop receiving alerts on that channel.

Access, correction, deletion. Email us at info@carerelay.health to request a copy of your information, correct it, or ask us to delete what we're not legally required to keep.

Cookies/analytics. You can control cookies through your browser settings.

We honor these requests regardless of where you live, subject to legal retention obligations.

Our services are for adults. You must be at least 18 to create an account, and our website is not directed at children.

If we change this Policy, we'll update the effective date above and, for material changes, notify account holders through the platform or by SMS/email before the change takes effect.

CareRelay, LLC · Michigan · Email info@carerelay.health.

For details on the photo, timestamp, and location captured at clock-in and clock-out, see our Shift Verification Capture Consent.